CVE-2021-37454: XSS
Published Jul 25, 2021
·Updated
Cross Site Scripting (XSS) exists in NCH Axon PBX v2.22 and earlier via the line name (stored).
Affected Software
1 affected component
Nchsoftware Axon Pbx<=2.22
Event History
Jul 25, 2021
CVE Published
via MITRE·08:11 PM
Data Sourced
via MITRE·08:11 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this cross-site scripting (XSS) vulnerability?
The vulnerability ID of this cross-site scripting (XSS) vulnerability is CVE-2021-37454.
2
What is the severity rating of CVE-2021-37454?
CVE-2021-37454 has a severity rating of medium with a CVSS score of 5.4.
3
How does the cross-site scripting (XSS) vulnerability in NCH Axon PBX v2.22 and earlier occur?
The cross-site scripting (XSS) vulnerability in NCH Axon PBX v2.22 and earlier occurs through the line name (stored).
4
How can I fix the cross-site scripting (XSS) vulnerability in NCH Axon PBX v2.22 and earlier?
To fix the cross-site scripting (XSS) vulnerability in NCH Axon PBX v2.22 and earlier, update to a version later than v2.22.
5
Is there any additional information available about CVE-2021-37454?
Yes, you can find more information about CVE-2021-37454 at the following references: [link_1] [link_2]